Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel. The total value of additional rewards and their recipients will updated here when all reports have gone through the reward panel.As usual, our ongoing internal security work was responsible for a wide range of fixes:[476786] CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives.Multiple vulnerabilities in V8 fixed at the tip of the 4.2 branch (currently 4.2.77.14).Many of the above bugs were detected using AddressSanitizer or MemorySanitizer.

67 comments
:

Why for google chrome and firefox the plugin for java AND Shockwave player isn't supported? I mean their both updated-but the plugins won't work or check. Plus when I checked chrome:plugins it has 5 plugins even flashplayer.

@Megan Ryan - There is a way to temporarily re-enable NPAPI support in Chrome. Go to chrome://flags/#enable-npapi and click Enable.

Keep in mind that in September 2015 (Chrome 45) NPAPI support will be permanently removed from Chrome and extensions that require NPAPI plugins will no longer be able to load those plugins. So, this is only a temporary fix.

i did find something today to tell me how to temporally re-enable this, now they all are showing up, i also know that in september 2015, that in the next version of google chrome(in september) i wont be able to re-enable them again ever.

PS2: Also, please redesign the card in which Chrome shows search suggestions (while typing in the omnibar). Please make it just like it is in Chrome's android version: the card is slightly 'raised'. Also, it would look better, in my opinion, if it takes only some space below JUST the omnibar, NOT the entire toolbar (which contains the back and forward buttons, the refresh button, the omnibar and the menu button.), just like it was in Chrome 27 and prior versions.

PS3: The font problem is occurring in Chrome's Windows 7 versions, but not in Windows 8.

There's another problem: extensions crash. I think all extensions crash while installed from the webstore, but not when installed in the developer mode. Extensions crash every time I start the browser or in the middle of browsing.

The message that is shown in the chrome://extensions page under the crashed extension is

"This extension may have been corrupted."

There appears an option to "Repair" the extension just left to the bin (remove) icon. Screenshot: http://imgur.com/WHLkyo7

Again, this is appearing on my Windows 7 computer, but not on Windows 8.

I am still using an old core 2 pc, today I found that the google chrome appears only one version of flash player, when I play facebook game, the CPU usage reach 100%, so I follow the above instruction to enable npapi version flash player.

Google, you better come up with a better solution then what you are going to force us Chrome users on your build that is coming out in September. Sites are not going to bow to you when you disable NPAPI permenatley for plug ins.There is a lot of coding that goes into plug in compatibility and this is going to cause a major stink.

Great. I used to have probs with facebook-videos. They shuttered and shaked (only FB). I had 2 flash-players in plugins (the normal one and that Pepper one). Always had to deactivate that Pepper-Flash, and videos worked fine. Now the normal Flash-Player is gone, so when i deactivate the Pepper, i can't watch any videos, because there is no other player anymore. And with it activated, they still shutter. So bye-bye FB-Videos. Or bye-bye Chrome...

Hangouts app in Gmail.com is broken and now one cannot use old Gmail.com plugin anymore. Going to Firefox now....The new Hangouts app in Gmail.com has broken communication (ie broken sounds) in phone calls.

New hangouts widget in Gmail on windows desktopon chrome browser, not showing ALL phone numbers in search: I am using the new Hangouts widget in Gmail, and am trying to call phone on it by pressing the phone icon. I have thousands on contacts. But when I try to search for a name in the phone number entry field, the search is not showing the desired names, even though the contact exists in Gmail contacts. This used to work fine in the old Gmail phone call widget. Kindly fix this. One can try to see this issue, by having 1000s of contacts in Gmail Contacts, and then try to “search” for that number in hangouts widget in Gmail, while trying to make a phone call from Gmail hangouts. Lots of those contacts will not show up.

From https://docs.google.com/document/d/1BGiX28xE51N932q9BrV84nBw5wO68kEMSQf8Iccmt5k/edit

@Jack Wilcox Thanks so much for that temporary fix. I was trying all day to figure out why none of the plugins would work for my security cameras different web interfaces or Java's version checker in Chrome but all worked fine in IE, which I haven't used in years. I hope when September comes everything is ready and Chrome compatible.

Has anyone else lost the "Permissions Manager"? (The drop-down when you click on the paper/lock to the left of the address bar). Until today I could make my permissions site-specific. Now it just links to the global settings page. Any way I can restore please?

Only right click enable plugins (adobe flash) if permission to plugins run is set to ask user (in old version i can enable plugin left button click). This didn't work if this options (DefaultPluginsSetting_Policy) enabled via AD GP.

If you play games on Zynga.com do NOT update to the newest version if you want to play the games. This version removes all versions of Flash except PepperFlash and it will not allow you to add another version. I cannot play games with PepperFlash or watch videos either as they are too jittery to view. If you want to update, I suggest you find another browser to play the games in because you will get NOTHING done with Chrome 42.

I'm all for modern standards, etc, but why in the world are you removing the NPAPI toggle that the general public is never going to find/use?

Even the most dense person in IT must realize how much of the Enterprise market relies on incredibly out of date Oracle/Java technologies, and your arguments about all the evils of said technology fall flat.

It's like telling homeless people they'd stop being homeless if only they bought a house.

Your approach to the Enterprise market with this issue is high on smugness, and completely void on realism.

Search in google:chrome 42.0.2311.90mFirst page:Adobe plug-in missing after upgrade to Version 42.0 ...Java Plugins disappear after new Chrome update to Version 42.Chrome 42.0.2311.90 m not support silverlight - MSDN - MicrosofJava Plugins disappear after new Chrome update to Version 42.0Webplayer not working on Chrome 42.0.2311.90 m | Unity ComShockwave Player in Chrome Version 42.0.2311.90 m | Adobe ...GWT plugin not wortking with Chrome 42.0.2311.90 m

I do not like the changes to Google Chrome for my bookmarks. It is harder to access them, the search function doesn't work as well and it takes a nightmare to open one up (clicking is so hard for me as I have limited use of my right hand). Ugg! Not liking this update whatsoever.

Well, unless java can get support before the last deadline this house will be dropping Chrome as it's main browser. The family here play Pogo Games (which is a Java based game site) and if Chrome cannot run java then, so long, and thanks for all the fish.

What a mess! If you've been using GPO (group policies) to set click-to-play, this version prevents plugin execution altogether. Why couldn't you just default to the nearest equivalent of the old GPO setting?Now we have to replace this GPO for every single of our customers.

While I appreciate some Google Products, let this be a lesson: Google does not rule the world, PERIOD. I'm not the only one Fed-up with their unilateral decisions and implementation of changes -- The masses are sick and god-damn tired of their arrogance and blatant bullying in the world of technology. Get over your damn-selves. If I choose to use an NPAPI Plug-In, that's my own damn business -- Get the hell out of our lives. Intrusive Nazi's.

I'm glad I'm not the only user that doesn't like the change to enable plugins. A single, simple left-click was sufficient before. Adding another click more than doubles the hassle, for no reason I can tell.

Is there a way to prevent Google Chrome from attempting to load all my Tabs on start-up?

It used to be, I would wait a while after opening Chrome, no more than half a minute or so, so that Chrome can cycle through all my Tabs and give an "Internet Connection Error" before turning on my Internet. This stopped it from trying to load all my 90-something Tabs even though I'm not looking at them. Then, I just go to each Tab when I'm ready, and they load as I am ready to look at them, and most importantly, not all at once when I'm not ready.

Now, with this new update, the way it works seems to have changed. Chrome will periodically try to load each unloaded Tab whenever it detects an Internet source, meaning my 90-something Tabs across 2 windows will each try to load, and I'll start hearing a Youtube video from a random Tab start playing and, worst of all, my computer slows to a crawl (plus, my Internet slows down, too, trying to load all those Tabs and the media within).

Is there anyway to go about this? Stop Chrome from loading Tabs on start-up and prevent it from always trying to load/refresh each Tab/page that's not loaded whenever it detects working Internet?

I almost cried when I went to open a bookmark yesterday to see that all of my meticulous organization I have spent years on was gone. The hundreds of folders, alphabetized, sorted, and cross referenced for the thousands of links I have saved for my work was all scrapped in favor of poorly categorized "Auto Folders" or a bulk list. And what I'm supposed to just set all that up again for a fancier bookmark menu? No, thank you and thank you so much to User Hedgehog for the fix. As long as I am able to keep the new bookmarks feature turned off I will stay with Google Chrome.

Well it took me 10 years to switch from Internet Explorer. Because I can't upload my checks at the bank and a few other Java things...I guess I will be returning back to Explorer...Hey at least they are not too bull headed to know we need the java.

As Götz Geese says above, where click to play is enforced using Group Policy in a Windows domain environment, you cannot click on a plugin to enable it. No amount of fiddling with the plugin settings in Chrome will enable the plugin to run. A lot of websites still use Flash and this is a major hassle in our environment where we have only recently switched to Chrome and now I have to tell people to go back to IE until this is fixed. Chrome version 42.0.2311.90

+1 for the old "click to play"-option to activate external plugins. The left-click was much more natural than ctrl-click and a dropdowm, where I need to choose, whether i want to hide or run this plugin.

@Sebastienne I don't understand why you say that watching online videos doesn't work for the average user of Chrome 42. If you're referring to the jitter issue with Pepper Flash, I have never seen it before. I'm sure I am not the only one. Furthermore, Flash use on the web is declining, replaced by HTML 5, which Chrome supports very well. Please share your video player problems in more detail; someone will be better able to help you out.